Tratando de aprender en todo momento. Apasionado de #infosec , #socialmedia y #fotografía.
Joined May 2009
- Tweets18.5K
- Following4.8K
- Followers1.6K
- Likes2.1K
Marcos retweeted
We've just released Shadow Repeater, for AI-enhanced manual testing. Simply use Burp Repeater as you normally would, and behind the scenes Shadow Repeater will learn from your attacks, try payload permutations, and report any discoveries via Organizer.
Marcos retweeted
Want to dive deeper into file upload vulnerabilities? 🤑
Check out our detailed article! 👇
buff.ly/41AOMZs
Marcos retweeted
24 hours remaining until voting closes on the Top 10 (new) Web Hacking Techniques of 2024! If you haven't already voted now's the time to do it.
portswigger.net/polls/top-10…
Marcos retweeted
How To Find A Cross-Contract Reentrancy Exploit by @0xjuaan : m.youtube.com/watch?v=UN_LGT…
The way he showed the mindset you need to escalate issue is perfect example of “Hacker’s mindset”
Marcos retweeted
Como utilizar masscan para hacer escaneos de puertos masivos en una red entera. #hackingetico #kalilinux #pentesting #informatica #nmap #masscan
Marcos retweeted
Top Ten (New) Web Hacking Techniques of 2024 voting open by @PortSwiggerRes
portswigger.net/polls/top-10…
#BBRENewsletter87
Marcos retweeted
Want to quickly get an overview of exposed hosts of your target using multiple internet search engines? 🤑
Check out Uncover by @pdiscoveryio! It allows you to quickly query several search engines and help you automate a huge part of your recon process!
Check it out on Github! 👇
buff.ly/3eNWfxB
Marcos retweeted
Bypassing Email verification through HTTP response interception
callgh0st.medium.com/bypassi…
#bugbounty #bugbountytips #bugbountytip
Marcos retweeted
10 Burp Suite Extensions you must have in your arsenal
bitpanic.medium.com/10-burp-…
#bugbounty #bugbountytips #bugbountytip
Marcos retweeted
Reduce Noise in Burp Suite with This Simple Trick! 🔥
💡 Just add the following patterns in Burp Suite under Proxy > Options > TLS Pass Through:
.*\.google\.com
.*\.gstatic\.com
.*\.googleapis\.com
.*\.pki\.goog
.*\.mozilla\..*
#bugbounty #bugbountytip
Marcos retweeted
Imagine opening a Discord message and suddenly your computer is hacked.
We discovered a bug that made this possible and earned a $5,000 bounty for it.
Here's the story and a beginner-friendly deep dive into V8 exploit development.
Watch: youtube.com/watch?v=R3SE4VKj…
Marcos retweeted
SQL injection (!!) and three RCEs in Mazda Connect Connectivity Master Unit affect Mazda cars from 2014 to 2021. Make sure to share this with your security teams. 🚘🔬🔥
Blog: zerodayinitiative.com/blog/2…
Marcos retweeted
🚀 HTTP recon automation with httpx
By @pdnuclei
Did you know that you can use httpx tool to request any URL path and see the status code and length and other details on the go, filter, or even perform exact matching on them?
Here’s an example:
cat domains.txt | httpx -path /swagger-api/ -status-code -content-length
#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp
Marcos retweeted
🔴 Find javascript files using gau and httpx 🔴
➡️ Here’s a recon tip to find javascript files hosted on our target using gau and httpx utilities:
📃 echo target.com | gau | grep '\.js$' | httpx -status-code -mc 200 -content-type | grep 'application/javascript'
What this combo will do is that it will collect all known URLs for our target from the AlienVault’s Open Threat Exchange (OTX), the Wayback Machine and Common Crawl, fetch them using httpx and then display only javascript files.
#bugbounty #bugbountytips #bugbountytip #hackerone #bugcrowd #infosec #cybersecurity #pentesting #redteam #informationsecurity #securitycipher #technology #coding #code #recon #ai #llm #owasp
Marcos retweeted
In Laravel, most devs disable debug mode and add custom errors to protect sensitive info if the app forcefiully shows the debug, but I've found that using a different HTTP method (mostly PUT) can sometimes reveal debug info if the custom error page is present. #BugBounty
Marcos retweeted
Checkout our new blogpost! In this post we talk about SAML and the recent Ruby-SAML Auth bypass.
CVE-2024-45409: Ruby-SAML Auth Bypass in GitLab
blog.projectdiscovery.io/rub…
Marcos retweeted
Race Condition , Allows creation of unlimited projects, bypassing free-tier limits.
dark0x.medium.com/race-condi…
#bugbounty #bugbountytips #bugbountytip